Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/EcA8o8CBbeRU-JnLaWqy0P6jB3M.roa
File:                     EcA8o8CBbeRU-JnLaWqy0P6jB3M.roa (raw, json)
Hash identifier:          KK9/TmGq7dI0NghjkO7e+VJhapwwhvagj3Y6uayokmg=
Subject key identifier:   11:C0:3C:A3:C0:81:6D:E4:54:F8:99:CB:69:6A:B2:D0:FE:A3:07:73
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       08D8
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/EcA8o8CBbeRU-JnLaWqy0P6jB3M.roa
Signing time:             Wed 18 Nov 2020 07:59:23 +0000
ROA not before:           Wed 18 Nov 2020 07:59:23 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18046
IP address blocks:        119.15.192.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2264 (0x8d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Nov 18 07:59:23 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=11C03CA3C0816DE454F899CB696AB2D0FEA30773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:18:35:68:96:c4:e0:99:a8:8b:41:64:87:ab:
                    ca:65:3c:aa:ac:13:ea:9e:dd:0a:5d:b1:1d:de:9c:
                    71:9c:5f:b3:b5:78:9b:e8:9e:36:b1:6b:2b:26:9d:
                    71:02:a7:d3:44:60:dd:07:1c:2b:d5:d8:ce:00:a4:
                    f1:6c:35:c6:4a:c2:95:c0:80:8d:3b:d8:fb:70:55:
                    19:03:f0:63:be:9b:69:5e:d3:e0:bc:19:28:49:5f:
                    47:68:b5:5c:4c:2d:df:e2:55:c4:fe:db:a8:f4:8f:
                    76:26:3c:99:a7:5d:18:cc:c3:c4:d3:da:0e:cd:0b:
                    b0:71:b8:8e:47:50:12:0d:d1:39:c5:9e:1f:9a:14:
                    16:a8:04:f4:0e:70:f2:4f:0d:74:af:77:81:5f:08:
                    f6:c9:70:2f:b0:4a:14:0d:f3:dd:e0:11:b8:61:85:
                    a4:f6:6f:1c:a5:b9:b6:e7:6d:eb:d4:f3:4f:21:47:
                    bc:e1:16:0f:19:ae:b8:78:48:99:4d:bc:26:ca:f3:
                    97:08:8f:ca:6d:3d:8e:3c:10:92:0c:c0:93:9c:80:
                    2c:11:9e:7d:4b:c2:cd:25:fb:cd:f0:eb:e0:d5:5d:
                    d6:e2:0f:eb:5e:38:65:df:57:1f:dc:9b:d9:2d:e3:
                    c7:c3:37:87:1d:0d:ec:ef:a6:b8:fa:0a:3c:cd:8f:
                    0b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C0:3C:A3:C0:81:6D:E4:54:F8:99:CB:69:6A:B2:D0:FE:A3:07:73
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/EcA8o8CBbeRU-JnLaWqy0P6jB3M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         33:7b:7c:2f:18:77:6a:06:aa:ce:55:d6:9a:5b:93:11:92:1d:
         97:73:a5:12:0e:c6:e0:75:69:72:22:63:75:94:e2:b7:92:86:
         78:03:7e:fb:39:66:b4:d9:9f:e1:20:8a:7f:8a:ee:c2:65:85:
         b4:90:6f:53:25:6a:6f:35:da:19:3e:5b:c0:da:72:5d:ed:ca:
         84:44:d9:64:49:f2:91:2a:47:83:10:ab:bc:2f:b7:87:e3:35:
         da:65:5a:14:7f:fa:1c:4e:fc:53:8d:15:be:58:02:58:00:0d:
         25:bd:35:b3:2b:1b:57:6b:4f:db:2c:2a:4d:55:cc:0c:1a:da:
         a3:ed:0f:5e:eb:1f:10:5a:85:86:52:bb:e1:cd:bd:9d:6a:60:
         1b:07:4f:8a:35:6a:10:85:73:51:27:a2:4a:00:a9:db:4f:0d:
         59:4e:fa:d5:0b:bd:93:b6:fa:a9:d6:82:bc:8d:c6:66:5a:c7:
         d1:08:b6:3c:3c:58:53:93:2c:80:bb:a2:0b:ea:f8:f9:d7:ed:
         c2:fb:aa:f4:bd:79:b1:df:6d:b2:58:9c:1f:4b:fd:48:58:30:
         19:c1:cb:73:16:a4:13:f7:fd:1e:c5:13:1b:be:31:fc:ac:ca:
         41:54:18:14:5e:7f:7b:5d:f8:eb:f4:b3:60:44:38:49:d3:25:
         b6:cc:31:6f
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCNgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMDExMTgw
NzU5MjNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDExQzAzQ0EzQzA4MTZE
RTQ1NEY4OTlDQjY5NkFCMkQwRkVBMzA3NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdGDVolsTgmaiLQWSHq8plPKqsE+qe3QpdsR3enHGcX7O1eJvo
njaxaysmnXECp9NEYN0HHCvV2M4ApPFsNcZKwpXAgI072PtwVRkD8GO+m2le0+C8
GShJX0dotVxMLd/iVcT+26j0j3YmPJmnXRjMw8TT2g7NC7BxuI5HUBIN0TnFnh+a
FBaoBPQOcPJPDXSvd4FfCPbJcC+wShQN893gEbhhhaT2bxylubbnbevU808hR7zh
Fg8Zrrh4SJlNvCbK85cIj8ptPY48EJIMwJOcgCwRnn1Lws0l+83w6+DVXdbiD+te
OGXfVx/cm9kt48fDN4cdDezvprj6CjzNjwsVAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUEcA8o8CBbeRU+JnLaWqy0P6jB3MwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvRWNBOG84Q0JiZVJVLUpuTGFXcXkw
UDZqQjNNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3cPwDAN
BgkqhkiG9w0BAQsFAAOCAQEAM3t8Lxh3agaqzlXWmluTEZIdl3OlEg7G4HVpciJj
dZTit5KGeAN++zlmtNmf4SCKf4ruwmWFtJBvUyVqbzXaGT5bwNpyXe3KhETZZEny
kSpHgxCrvC+3h+M12mVaFH/6HE78U40VvlgCWAANJb01sysbV2tP2ywqTVXMDBra
o+0PXusfEFqFhlK74c29nWpgGwdPijVqEIVzUSeiSgCp208NWU761Qu9k7b6qdaC
vI3GZlrH0Qi2PDxYU5MsgLuiC+r4+dftwvuq9L15sd9tslicH0v9SFgwGcHLcxak
E/f9HsUTG74x/KzKQVQYFF5/e1346/SzYEQ4SdMltswxbw==
-----END CERTIFICATE-----